fix(sbom): use group field for pom.xml and nodejs files for CycloneDX reports

[DmitriyLewen]

Description

We separate GroupID and ArtifactID to group and name fields for jar files - #4674
But we need to use same logic for all Java files.

Also we need to store nodejs scopes to group fields (see #5908).

Related issues

• Close Use group fields for npm for CycloneDX #5908

Related PRs

• feat(sbom): use group field for jar in cyclonedx #4674

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).